Security
Your mailbox is in good hands
You trust us with access to your mailbox. We do everything we can to keep your data secure and your privacy protected at all times. Here is exactly what we do with your data and what we don’t.
- Servers in Germany
- AES-256 encrypted
- Deleted automatically
- Read-only access
Servers in Germany
Mailovo runs on its own servers in a data centre in Nuremberg. Your emails and login details never leave Germany. We never sell data and work under GDPR. Payments are handled by Stripe, so we never see your card details.
Login details encrypted
We store passwords encrypted with AES-256. The key is kept separate from the database. The connection to your provider is always encrypted.
Deleted automatically
Once the move and forwarding are over, we delete your login details right away. Moves that were never started after one day, backups after 7 days. At the push of a button, any time.
Your old mailbox stays as it is
We open your old mailbox read-only. Nothing there is deleted, moved or marked as read.
No emails on our servers
Your emails flow straight from the old mailbox to the new one, or straight to your browser for a backup. Not a single email is stored with us. For the address checklist we only look at sender, subject and date.
Protection against misuse
When a move starts, the old mailbox gets a notice with a stop link. If someone else started the move, one click ends everything and deletes the login details. Many failed attempts in a row are slowed down automatically.
What we store and for how long
| Data | How long |
|---|---|
| Your emails | Not at all. They are only passed through. |
| Passwords (encrypted) | Until the move and forwarding end. After an error, no more than 3 days so we can help |
| Addresses, providers and report | 30 days after completion, then deleted completely |
| For the address checklist: senders (domain, name), subject, date | 30 days after completion; deleted at once if switched off |
| For the newsletter list: unsubscribe links from the email header | 30 days after completion; deleted at once if switched off |
| For the contact list: recipients from “Sent” (address, name, count) | 30 days after completion; deleted at once if switched off |
| Technical log without content or passwords | 30 days after completion |
| Invoices: name, address, amount, payment method and Stripe payment reference (no card details) | 10 years (legal retention requirement) |
| For the test limit: checksums of IP address and old mailbox | IP 2 days, mailbox 3 years (one test per mailbox) |
| Questions to Mailovo help (no names; addresses and passwords are removed) | 180 days |
| For the reminder “Close your old mailbox?”: old and new address | Until it is sent after 8 weeks; deleted at once if you unsubscribe |
| Your email settings and unsubscribes (only as a checksum of the address) | Until you change them or delete your account |
No advertising cookies, no analytics services. We serve fonts and images ourselves.
Our copy engine is open source. If you know your way around code, you can check that your old mailbox is only read. View the source code
Tip: save your move report as a PDF. After 30 days we delete it as well.